Making a flow from eth0 to eth1 on a virtual machine
|Reported by:||cramped_gamut@…||Owned by:||aturner|
|Keywords:||tcpreply and L7 filter||Cc:|
|Operating System:||Linux||Add to FAQ?:||yes|
|Output of tcpreplay -V:|
I am trying to use tcpreplay in a virual machinewhich has ubuntu version 11.10 kernel 2.6.38. I am trying to detect some protocols using L7 filter in ubuntu. For this, i captured some pcap files.
Now my try is to replay this traffic and send it through L7 filter and try to check whether it is being detected or not.
On my virtual pc, it has 2 nics, eth0 and eth1. What am i trying to do is to replay one pcap file for ex: dhcp.pcap through eht0, and then pass that traffic to L7 filter which is installed on the same ubuuntu OS (virutal) and check it whether detection is made or not and finally get output from eht1.
But for that firstly i need to send traffic from eth0 and get its output from eht1.
And i tried that command for this purpose. Is this the right one??
tcpprep --auto=bridge --pcap=dhcp.pcap --cachefile=dhcp.cache
and su tcpreplay -C dhcp.cache -i eth0 -j eth1 dhcp.pcap
I am using tcpreplay version 3.4.3-2